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Abstract 
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One of the big questions in the area of curves over finite fields concerns the distribution of 
the numbers of points: Which numbers occur as the number of points on a curve of genus 
gl The same question can be asked of various subclasses of curves. In this article we 
<r^ \ classify the possibilities for the number of points on genus 4 hyperelliptic supersingular 

ch ! curves over finite fields of order 2 n , n odd. 
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^ ' 1 Introduction 

On 

Throughout this paper we let q = 2 n , where n is odd, and let ¥ q denote a finite field with 
q elements. 

X" 

This paper concerns the possibilities for the number of F^-rational points, N, on hyperel- 
liptic supersingular curves. The Serre refinement of the Hasse-Weil bound gives 

\N-(q + l)\ <g[2^\ (1) 

which allows a wide range of possible values for N. The typical phenomenon for super- 
singular curves is that the number of points is far more restricted than the general theory 
allows. 
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To be more precise, for curves of genus less than 4 the following results are known. 

Theorem 1. (Deuring, Waterhouse) The number of¥ q -rational points N on a supersin- 
gular genus 1 curve defined over ¥ q satisfies 

N-(q + l)e{0,±^}, 

and all these occur. 

Theorem 2. (Ruck, Xing) The number of¥ q -rational points N on a hyperelliptic super- 
singular genus 2 curve defined over ¥ q satisfies 

iV-(g + l)G{0,±v^}, 

and all these occur. 

Theorem 3. ( Oort) There are no hyperelliptic supersingular genus 3 curves in character- 
istic 2. 

In this paper we will prove the following theorem. 

Theorem 4. The number of¥ q -rational points N on a hyperelliptic supersingular genus 
4 curve defined over ¥ q satisfies 

N-(q + l)E {0, ±v^, ±1yJTq, ±4v^} 

and all these occur. 

Examples show that all these values do indeed occur, see next section. We note that 
±3y/2q is not a possibility. 

Classifying the possible numbers of points is the same as classifying one coefficient of 
the zeta function, so these results can be seen as a contribution towards classification of 
zeta functions. 

Our proof uses the theory of quadratic forms in characteristic 2. This method has previ- 
ously been used in this context in van der Geer-van der Vlugt [1]. There is aslo a discussion 
in Nart-Ritzenthaler Q, see Lemma 2.2, which restricts the number of points sufficiently 
for their purposes, but does not completely classify them. 

In Section 2 we present background on curves, and in Section 3 we present background 
on quadratic forms. Section 4 presents our proof using quadratic forms. In Section 5 we 
present an alternative proof, under an extra hypothesis, using the theory of abelian vari- 
eties. The two methods of proof are completely different. Although the second method 
does not prove the full result, we believe it is of interest. 
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2 Curves Background 



The equation 

y 2 + y = x 9 + ax 5 + bx 3 . (2) 

defines a hyperelliptic curve of genus 4 over ¥ q , where a,b E ¥ q . It is shown by Scholten- 
Zhu [5] that this curve is supersingular, and conversely, that any hyperelliptic supersin- 
gular curve of genus 4 defined over F 9 is isomorphic over the algebraic closure ¥ q to a 
curve with equation ©. 

This is not a normal form for isomorphism over ¥ q . It is shown in [4J (using the Deuring- 
Shafarevitch formula) that any genus 4 hyperelliptic curve of 2-rank defined over ¥ q has 
an equation of the form 

y 2 + y = cqx 9 + cjx 7 + c^x + c^x 3 + c\x. 

It is also shown in 01 that this curve is supersingular if and only if c 7 = 0. Therefore, 
any hyperelliptic supersingular curve of genus 4 defined over ¥ q is isomorphic over ¥ q to 
a curve with equation 

y 2 + y = fx 9 + ax 5 + bx 3 + cx + d (3) 

for some constants /, a, b,c,d G ¥ q . One needs an extension field, in general, to get an 
isomorphism with ©. 

For examples, when n = 11, and w is a primitive element of F 2 n with minimal polyno- 
mial x 11 + x 2 + 1, the curve 

„9 , „„ 512^5 i „„ 118^3 



j 9 x 9 + w 517 x 5 + w 121 x 3 + w 24 x 

) = —256. Examples with N — (2 11 + 1) = ±256 are not common. The 



„9 , „,, 520^5 i „„ 117^3 , „„H„ 



c 9 + w 520 x 5 + w 117 x 3 + w 15 x 
has N - (2 11 + 1) = -128. Examples with N - (2 11 + 1) = or ±64 are plentiful. 
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3 Quadratic Forms Background 



We now outline the basic theory of quadratic forms over F 2 . 



Let Q : ¥ q 



F 2 be a quadratic form. The polarization of Q is the symplectic bilinear 



form B defined by 

B(x,y)=Q(x + y)-Q(x)-Q(y). 

By definition the radical of B (denoted W) is 

W = {x G ¥ q : B(x, y) = for all y G F J. 

The rank of B is defined to be n — dim(W), and the first basic theorem of this subject 
states that the rank must be even. 

Next let Q\w denote the restriction of Q to W, and let 

W = {x G W : Q(x) = 0} 

(sometimes Wq is called the singular radical of Q). Note that Q\w is a linear map W — > 
F 2 with kernel W . Therefore 



The rank of Q is defined to be n — dim(VKo). The following theorem is well known, see 
HI or [0 for example. 

Theorem 5. Continue the above notation. Let M = \{x £ F q : Q(x) = 0}|, and let 
w = dim(W). 

IfQ has odd rank then M = 2 n_1 . In this case, Yl,x& q (~ = 0. 
IfQ has even rank then M = 2 n ~ l ± 2 < - n - 2+w ^ 2 . 




dim(W) - 1 
dim(W) 



if Q\ w is onto 

ifQ\ w = 0(i.e. W = W ). 
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4 Proof of Theorem 4 



Determining the value of the sum 

g ._ ^ j^Tr(/rr 9 +qx 5 +kr 3 +c£+<f) 



x€F„ 



is equivalent to determining the number of x G F q for which Tr(/a; 9 +ax 5 +6a; 3 +ca;+(i) = 
0. By Hilbert's Theorem 90, this is equivalent to determining the number of solutions in 
¥ q of ©. Indeed, if iV is the number of projective F g -rational points on 

U 2 + U = fx 9 + ax 5 + bx 3 + cx + d 

then 5 = N- (q+ 1). 

Theorem 6. S must take values in the set 

{0, ±2 (n+1)/2 , ±2 (n+3)/2 , ±2 (n+5)/2 }. 
Equivalently, N — (q + 1) mM,st tote values in the set 

{0,±v^,±2v^, ±4v^}. 



Proof: Squaring S gives 

g2 _ ~y ^ ^_^Tr(fx 9 +fy 9 +ax 5 +ay 5 +bx 3 +by 3 +cx+cy) 
x,y& q 

Substituting y = x + u, and for notational purposes letting x(t) = (— l) Tr ^, we get 

S 2 = ^ x(fx 9 + f(x + u) 9 + ax 5 + a(x + u) 5 + bx 3 + b(x + uf + cx + c(x + u)) 

x,u£W q 

= x(/(x 8 m + xu 8 + u 9 ) + a(x 4 u + xu 4 + u 5 ) + b{x 2 u + xu 2 + u 3 ) + cu) 

x,u£¥ q 

= ^2 x(f u9 + au5 + bu3 + cu ) ( ^2 x(f( x8u + xu8 ) + a { x ^ u + xu4 ) + b(x 2 u + xu 2 )) 

u£F q ^x<=F q 

To obtain the last line we have used the facts that x{ s + t) = x( s )x(t) and x(t 2 ) = x(t)- 
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The inner sum has the form XLgf x{ x ^), and is a character sum over a group because x 
is a character of the additive group of ¥ g . This sum is therefore unless L = 0. Letting 

L fAib (u) = L(u) = fu + /V 4 + aV + aV 2 + &V + feV 6 

we have 

u€¥ q \& q ' 

and the inner sum is unless L(u) = 0. 

Note that L(u) is a linearized polynomial, and the roots form a vector space over F 2 . Let 
W/,a,& — ^ be the kernel of L(u) inside F 9 , i.e., 

W = {u e W q : L(it) = 0}. 

Then W is an F 2 -subspace of ¥ q of dimension at most 6, because L(u) has degree 64 = 2 6 . 

The next part of the proof is to observe that the dimension of W must be odd. This is 
because n — dim{W) is the rank of a symplectic bilinear form, and this rank must be 
even. The form here is B(x,y) = Q(x + y) — Q(x) — Q(y) where Q(x) = Tr(/x 9 + 
ax 5 + bx 3 + cx) is an F 2 -valued quadratic form. It is straightforward to check that W is 
the radical of B. 

We now conclude that W is an F 2 -subspace of ¥ q of dimension 1 or 3 or 5. 
We may now write 

S 2 = q^2 X(fu 9 + au 5 + bu 3 + cu). 

If Q is not identically on W, then S = by Theorem [51 because x is a non-trivial 
character on W and Q has odd rank. On the other hand, if Q is identically on W, then 
Q has even rank and by Theorem [5j we get 

S 2 = q-\W\. 

Because \ W\ = 2 W where w £ {1,3,5} we are done. □ 
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5 Jacobians of supersingular hyperelliptic curves 



In this section we prove the main theorem of this article via the theory of supersingular 
abelian varieties, but under an extra assumption, which most likely holds for this type of 
abelian variety. 

Recall that a curve C is called supersingular over a finite field ¥ q if its Jacobian Jac(C) 
is a supersingular abelian variety. Therefore we start with some facts from the theory of 
abelian varieties. 

Let A be an abelian variety of dimension g over ¥ q where q = p n . The characteristic 
polynomial P(X) E Z[X] of the Frobenius endomorphism is given by 

P A (X) = X 29 + a.X 29 - 1 + ■■■ + a g X 9 + qa g _ x X 9 ~ x ■■■ + q 9 . 

Recall that an abelian variety A is simple if it is not isogenous to a product of abelian 
varieties of lower dimensions. In that case Pa(X) is either irreducible over Z or Pa(X) = 
h(X) e where h(X) e Z[X] is irreducible over Z. 

The isogeny classes are completely classified by their characteristic polynomials. 

Theorem 7. (Tate) Let A and B be the abelian varieties defined over ¥ q . Then an abelian 
variety A is ¥ q -isogenous to an abelian subvariety of B if and only if Pa(X) divides 
Pb(X) over Q[X}. In particular, Pa(X) = Pb{X) if and only if A and B are ¥ q - 
isogenous. 

The property of an abelian variety being supersingular is a property of the isogeny class 
of this abelian variety and therefore it is completely determined by its characteristic poly- 
nomial. For example there is the Stichtenoth-Xing criteria that imposes conditions on 
the coefficients of a characteristic polynomial Pa(X) of an abelian variety A over a finite 
field ¥ q to be a supersingular abelian variety. Their result is the following. 

Theorem 8. Let q = p n and A be an abelian variety of dimension g over a finite filed ¥ q 
with the characteristic polynomial of the Frobenius endomorphism 

P A {X) = X 29 + a x X 29 ~ x + ■■■ + a g X 9 + qa^X 9 ' 1 ■ ■ ■ + q 9 . 

Then A is supersingular if and only if p^l \a,j for all 1 < j < g. 
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The main object of investigation of this paper is a supersingular curve of genus 4 over a 
finite field F 2 », where n is an odd number. Therefore we start with a list of the charac- 
teristic polynomials of a simple supersingular abelian variety of dimension less or equal 
4 over F 2 n, see J6]|. 

X 2 ± 2( n+1 )/ 2 X + 2 n 
X 2 + 2 n 

X A ± 2 n X 2 + 2 2n 

X 4 ± 2(™ +1 )/ 2 X 3 + 2 n X 2 ± 2( 3n+1 )/ 2 X + 2 2n 
(X 2 -2 n ) 2 

X 8 -j- 2( n+1 )/ 2 X 7 + 2 n X 6 — 2 2n X 4 + 2 3n X 2 ± 2'- 7n+1 -'/ 2 X + 2 4n 
X 8 + 2 4n 

X 8 - 2 n X 6 + 2 2n X 4 - 2 3n X 2 + 2 4n . 

As a direct consequence of Tate's theorem (Theorem [7]) we obtain the following proposi- 
tion. 

Proposition 1. Let C be a supersingular curve of genus 4 over a finite field F 2 ™, where n 
is odd, such that j^C{¥2 n ) = 2 n + 1 ± 3-\/2 n+1 . Then the polynomial 

(X 2 + 2 (n+1)/2 X + 2 n ) 3 (X 2 + 2 n ) 

is the characteristic polynomial of the Frobenius on Jac(C). 

We prove that under certain conditions, this type of curve is impossible. 

Now, we consider the endomorphism algebra of the Jac(C), and consider the element 
(Frob + Ver)/2 (n ~ 1 )/ 2 (where Frob is the Frobenius endomorphism and Ver is the Ver- 
schiebung). From Theorem[8]it follows that this element is algebraic: 

Lemma 9. Let u be a root of the characteristic polynomial of Frobenius of supersingular 
curve. Then the number (u + tu) /2 ( - n ~ 1 ^ 2 is an algebraic number. 

Now we can prove the main theorem about the number of rational curves on the curves 
under consideration. 

Theorem 10. Let C be a hyperelliptic supersingular curve of genus 4 over a finite field 
¥ 2 n, with oddn. //(Frob + Ver)/2( n - 1 )/ 2 is an endomorphism of Jac(C) then 

#C(F 2 n) — 2 n — 1 G {0, ±2 (n+1)/2 ± 2 • 2 (n+1)/2 , ±4 ■ 2 (n+1)/2 }. 
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Proof. From Theorem[8]it follows that Tr(Frob F2n ) is divisible by 2 {n+1 ^ 2 , hence 2^ n+1 ^ 2 
divides #C(F 2 «) — 2 n — 1. Combing this result and the Hasse-Weil-Serre bound we get 

that #C(F 2 n) - 2 n - 1 = jV2( n+1 )/ 2 , with \N\ < 4. 

Now we assume that #C(F g ) = 2 n + 1 ± 3 • 2 ( - n+1 ^ 2 . Then by Proposition [TJ and Tate's 
theorem it follows that Jac(C) ~ Ef x i? 2 , where i?i and £" 2 are supersingular elliptic 
curves with characteristic polynomials X 2 + 2^ n+1 ^ 2 X + 2 n and X 2 + 2 n , respectively. 
The polynomial (X — 2) 3 Xis the characteristic polynomial of (Frob + Vei)/2 ( - n ~ 1 ^ 2 , 
and the resultant of these factors is 2. Therefore by theorem 1 in (81 it follows there 
exists a curve D such that Jac(D) is isogenous either Ef or E 2 and there exists a double 
cover cr : C — > D. Due to the fact the hyperelliptic involution lies in the center of an 
automorphism group of a hyperelliptic curve we get the following decomposition 

Jac(C) ~ Jac(£>) x Jac(C/(ar)) 

and a double covering or : C — >■ C / < or >. Therefore we have that either D has genus 
3 or C I < or > has genus 3, which is impossible by Hurwitz's genus formula. □ 
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